CVE-2026-70490

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.8.8 through 0.10.9

Description The terminal WebSocket route in backend/open webui/routers/terminals.py fails to apply the verified-user role gate that is enforced on HTTP terminal routes. Specifically, the resolve authenticated connection helper backing the /{server id}/api/terminals/{session id} WebSocket route authenticates the first-message JWT independently and omits the database-level role check performed by get verified user(). This allows accounts with a pending role—such as registered but unapproved accounts or deactivated accounts—to establish interactive terminal sessions, provided at least one terminal server is configured and the account's access grants allow it. This creates a discrepancy where an administrator may see access revoked via HTTP while the WebSocket connection remains active.

Recommendations Update Open WebUI to version 0.11.0.